Nueva variante de FAKE ALERT RENOS

Detectada heuristicamente por el ELISTARA, nos llega una muestra de una variante del FAKE ALERT RENOS, que actualmente solo es detectada por 16 de 43 antivirus:
File name: SSHNAS21.DLL.Muestra EliStartPage v22.07
Submission date: 2010-11-25 09:12:46 (UTC)
Current status: finished
Result: 16 /43 (37.2%)
 VT Community

malware
 Safety score: 0.0% 
Compact Print results Antivirus Version Last Update Result
AhnLab-V3 2010.11.25.00 2010.11.24 –
AntiVir 7.10.14.100 2010.11.25 –
Antiy-AVL 2.0.3.7 2010.11.25 –
Avast 4.8.1351.0 2010.11.24 –
Avast5 5.0.594.0 2010.11.24 –
AVG 9.0.0.851 2010.11.24 –
BitDefender 7.2 2010.11.25 Trojan.Generic.KDV.72857
CAT-QuickHeal 11.00 2010.11.25 –
ClamAV 0.96.4.0 2010.11.25 –
Command 5.2.11.5 2010.11.25 W32/FakeAlert.IV.gen!Eldorado
Comodo 6840 2010.11.25 MalCrypt.Indus!
DrWeb 5.0.2.03300 2010.11.25 –
Emsisoft 5.0.0.50 2010.11.25 –
eSafe 7.0.17.0 2010.11.24 –
eTrust-Vet 36.1.7999 2010.11.25 Win32/Renos.D!generic
F-Prot 4.6.2.117 2010.11.24 W32/FakeAlert.IV.gen!Eldorado
F-Secure 9.0.16160.0 2010.11.25 Trojan.Generic.KDV.72857
Fortinet 4.2.254.0 2010.11.23 –
GData 21 2010.11.25 Trojan.Generic.KDV.72857
Ikarus T3.1.1.90.0 2010.11.25 –
Jiangmin 13.0.900 2010.11.25 –
K7AntiVirus 9.69.3075 2010.11.25 Riskware
Kaspersky 7.0.0.125 2010.11.25 –
McAfee 5.400.0.1158 2010.11.25 –
McAfee-GW-Edition 2010.1C 2010.11.25 –
Microsoft 1.6402 2010.11.25 –
NOD32 5646 2010.11.24 a variant of Win32/Kryptik.ILH
Norman 6.06.10 2010.11.24 –
nProtect 2010-11-25.01 2010.11.25 Trojan.Generic.KDV.72857
Panda 10.0.2.7 2010.11.24 Suspicious file
PCTools 7.0.3.5 2010.11.25 –
Prevx 3.0 2010.11.25 High Risk Cloaked Malware
Rising 22.75.01.09 2010.11.25 –
Sophos 4.60.0 2010.11.25 Mal/FakeAV-CX
SUPERAntiSpyware 4.40.0.1006 2010.11.25 Trojan.Agent/Gen-DecSec
Symantec 20101.2.0.161 2010.11.25 –
TheHacker 6.7.0.1.090 2010.11.25 –
TrendMicro 9.120.0.1004 2010.11.25 –
TrendMicro-HouseCall 9.120.0.1004 2010.11.25 –
VBA32 3.12.14.2 2010.11.24 –
VIPRE 7405 2010.11.25 VirTool.Win32.Obfuscator.hg!b1 (v)
ViRobot 2010.11.19.4158 2010.11.25 –
VirusBuster 13.6.58.0 2010.11.24 Trojan.Codecpack.Gen.11
Additional informationShow all 
MD5   : 9381469817bc7b3b61db583e945a0d42
SHA1  : de956e3e44e82b687e63e9a331614b13b1ebf584

File size : 252928 bytes

publisher….: Opera Software
copyright….: Seven Golds
product……: Seven Gold Soft
description..: Gold Softs Version 2011
original name: Seven Golds.exe
internal name: Seven Golds.exe
file version.: 7.0.0.1057
 

Lo pasamos a controlar a partir del ELISTARA de hoy 22.09

Estará disponible en nuestra web a partir de las 19 h

saludos

ms, 25-11-2010